The Network and Information Systems (EU Exit) (Amendment) Regulations 2021
These Regulations are made in exercise of the powers conferred by section 8(1) and (5) of, and paragraph 21 of Schedule 7 to, the European Union (Withdrawal) Act 2018 (c. 16) in order to address failures of retained EU law to operate effectively and other deficiencies (in particular under section 8(2)(d)) arising from the withdrawal of the United Kingdom from the European Union.
The Network and Information Systems (EU Exit) (Amendment) Regulations 2021
Skip to main content
Skip to navigation
legislation.gov.uk
https://www.nationalarchives.gov.uk
Cymraeg
Home
Explore our collections
Research tools
Help and guidance
What's new
About us
Search Legislation
The Network and Information Systems (EU Exit) (Amendment) Regulations 2021
You are here:
UK Statutory Instruments
2021 No. 1461
Whole
Instrument
Table of Contents
Content
Explanatory Memorandum
More Resources
Previous
Next
Plain View
Print Options
What Version
Latest available (Revised)
Original (As made)
Opening Options
Open whole Instrument
More Resources
Original: King's Printer Version
View more
Status:
This is the original version (as it was originally made). This item of legislation is currently only available in its original format.
Statutory Instruments
2021 No. 1461
Exiting The European Union
Electronic Communications
The Network and Information Systems (EU Exit) (Amendment) Regulations 2021
Made
15th December 2021
Coming into force
12th January 2022
The Secretary of State makes these Regulations in exercise of the powers conferred by section 8(1) and (5) of, and paragraph 21 of Schedule 7 to, the European Union (Withdrawal) Act 2018(
1
).
In accordance with paragraph 1(1) of Schedule 7 to that Act, a draft of this instrument has been laid before Parliament and approved by a resolution of each House of Parliament.
Citation and commencement
1.
These Regulations may be cited as the Network and Information Systems (EU Exit) (Amendment) Regulations 2021 and come into force twenty-eight days after the day on which they are made.
Extent and application
2.
—(1) These Regulations extend to England and Wales, Scotland and Northern Ireland.
(2) These Regulations apply to—
(a)
the United Kingdom, including its internal waters;
(b)
the territorial sea adjacent to the United Kingdom(
2
); and
(c)
the sea (including the seabed and subsoil) in any area designated under section 1(7) of the Continental Shelf Act 1964(
3
).
Amendment of the Network and Information Systems Regulations 2018
3.
—(1) Regulation 12 of the Network and Information Systems Regulations 2018(
4
) (relevant digital service providers) is amended as follows.
(2) For paragraph (7)(b) substitute—
“
(b)
have regard to any relevant guidance published by the Information Commissioner.
”
.
Amendment of Commission Implementing Regulation (EU) 2018/151
4.
—(1) Commission Implementing Regulation (EU) 2018/151 of 30 January 2018 laying down rules for application of Directive (EU) 2016/1148 of the European Parliament and of the Council as regards further specification of the elements to be taken into account by digital service providers for managing the risks posed to the security of network and information systems and of the parameters for determining whether an incident has a substantial impact is amended as follows(
5
).
(2) In Article 2(5) for the words from “Pursuant to” to the end of the paragraph substitute
“United Kingdom, European and internationally accepted standards and specifications relevant to the security of network and information systems may also be used.”
.
(3) In Article 3(3) for “Member States of the EU” substitute
“areas of the United Kingdom”
.
(4) Omit Article 4.
Julia Lopez
Minister of State
Department for Digital, Culture, Media and Sport
15th December 2021
EXPLANATORY NOTE
(This note is not part of the Regulations)
These Regulations are made in exercise of the powers conferred by section 8(1) and (5) of, and paragraph 21 of Schedule 7 to, the European Union (Withdrawal) Act
2018 (c. 16)
in order to address failures of retained EU law to operate effectively and other deficiencies (in particular under section 8(2)(d)) arising from the withdrawal of the United Kingdom from the European Union.
These Regulations amend both the retained EU law version of Commission Implementing Regulation (EU) 2018/151 and the Network and Information Systems Regulations 2018 (
S.I. 2018/506
) (which relate to securing network and information systems) by amending and removing certain criteria for managing and reporting cyber risks that apply to digital service providers where those criteria are no longer appropriate now that the United Kingdom has left the European Union. In particular, thresholds for reporting cyber incidents that were set by reference to the impact of the incident on the European Union’s population have been removed and these thresholds will instead be set in guidance.
A full impact assessment has not been produced for this instrument as no, or no significant, impact on the private, voluntary or public sectors is foreseen.
(
1
)
2018 c. 16
. Section 8 was amended by section 27 of the European Union (Withdrawal Agreement) Act
2020 (c. 1)
. Paragraph 21 of Schedule 7 was amended by the same Act, Schedule 5, paragraph 53.
(
2
)
Section 1(5) of the Territorial Sea Act
1987 (c. 49)
has the effect that any reference to the territorial sea adjacent to the United Kingdom (UK) must be construed in accordance with that section and any provision made, or having effect as if made, under it.
S.I. 1989/482
and
2014/1353
are Orders made under that section which set out some of the limits of the territorial sea adjacent to the UK.
(
3
)
1964 c. 29
. Section 1(7) was amended by section 37 of, and paragraph 1 of Schedule 3 to, the Oil and Gas (Enterprise) Act
1982 (c. 23)
and section 103 of the Energy Act
2011 (c. 16)
.
(
4
)
S.I. 2018/506
, amended by
S.I. 2018/629
,
2019/653
and
2020/1245
.
(
5
)
EUR 2018/151, amended by
S.I. 2019/653
.
Previous
Next
Back to top
Options/Help
Print Options
Official printed copies
Order a copy of this legislation
buy now
Print
The Whole
Instrument
PDF
The Whole
Instrument
Web page
The Whole
Instrument
Legislation is available in different versions:
Latest Available (revised):
The latest available updated version of the legislation incorporating changes made by subsequent legislation and applied by our editorial team. Changes we have not yet applied to the text, can be found in the ‘Changes to Legislation’ area.
Original (As Enacted or Made):
The original version of the legislation as it stood when it was enacted or made. No changes have been applied to the text.
Opening Options
Different options to open legislation in order to view more content on screen at once
Explanatory Memorandum
Explanatory Memorandum sets out a brief statement of the purpose of a Statutory Instrument and provides information about its policy objective and policy implications. They aim to make the Statutory Instrument accessible to readers who are not legally qualified and accompany any Statutory Instrument or Draft Statutory Instrument laid before Parliament from June 2004 onwards.
More Resources
Access essential accompanying documents and information for this legislation item from this tab. Dependent on the legislation item being viewed this may include:
the original print PDF of the as enacted version that was used for the print copy
lists of changes made by and/or affecting this legislation item
confers power and blanket amendment details
all formats of all associated documents
correction slips
links to related legislation and further information resources
More Resources
Use this menu to access essential accompanying documents and information for this legislation item. Dependent on the legislation item being viewed this may include:
the original print PDF of the as made version that was used for the print copy
correction slips
Click 'View More' or select 'More Resources' tab for additional information including:
lists of changes made by and/or affecting this legislation item
confers power and blanket amendment details
all formats of all associated documents
links to related legislation and further information resources
The data on this page is available in the
alternative data formats
listed:
HTML5
alternative version
HTML snippet
alternative version
PDF
alternative version
XML
alternative version
Akoma Ntoso
alternative version
HTML RDFa
alternative version
RDF/XML
alternative version
New site design
Help
About us
Site map
Accessibility
Contact us
Privacy notice
Cookies
All content is available under the
Open Government Licence v3.0
except where
otherwise stated
. This site additionally contains content derived from EUR-Lex, reused under the terms of the
Commission Decision 2011/833/EU
on the reuse of documents from the EU institutions. For more information see the
EUR-Lex public statement on re-use
.
©
Crown and database right